PT-2016-7970 · Francis Cianfrocca · Eventmachine

Published 2016-08-06 · Updated 2016-08-06

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions EventMachine (affected versions not specified)

Description The issue concerns a potential crash of EventMachine when opening a high number of parallel connections, specifically 1024 or more, to a server using the EventMachine engine. This crash occurs due to file descriptors overwriting the stack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2016-0276

Affected Products

Eventmachine

References · 6

• https://osv.dev/vulnerability/MGASA-2016-0276 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0276.html · Security Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696015 · Note
• http://lwn.net/Alerts/694766 · Note
• https://bugs.mageia.org/show_bug.cgi?id=18988 · Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678512 · Note